This Privacy Policy explains how Caitlin Jane Event Design ("we", "us", "our") collects, uses, and protects your personal information when you visit our website, make an enquiry, or book tickets for an event. We are the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your information, contact us at [email protected].

We only collect information we need to respond to you and provide our services. Depending on how you use our website, this may include:

• Enquiry details — your name, email address, phone number (if provided), and the content of any message you send through our enquiry form.

• Booking and ticket details — your first and last name, email address, phone number (if provided), the event you are booking, and the tickets you select.

• Payment information — when you pay for tickets, your card details are collected and processed directly by our payment provider, Stripe. We do not see or store your full card number.

• Usage information — if you accept analytics cookies, we collect anonymised information about how you use our site, such as pages visited and device type.

We use your personal data to:

• Respond to your enquiries and communicate with you.

• Process ticket bookings and payments, and send booking confirmations and tickets.

• Manage event check-in, including generating the QR codes on your tickets.

• Handle refunds, cancellations, and waiting lists where applicable.

• Understand how our website is used and improve it (only with your consent).

Our lawful bases for processing are: performance of a contract (to fulfil your booking), our legitimate interests (to respond to enquiries and improve our services), and your consent (for analytics cookies and any marketing).

Our website uses cookies. Essential cookies are required for the site to work. Analytics cookies (Google Analytics) are only used if you accept them via our cookie banner, and IP addresses are anonymised. For full details, see our Cookie Policy.

Ticket payments are handled securely by Stripe. When you make a payment, your card details are sent directly to Stripe and are not stored on our systems. Stripe processes this data in accordance with its own privacy policy.

We do not sell your personal data. We share it only with trusted service providers who help us operate our website and deliver our services, including:

• Stripe — payment processing.

• Mailjet — sending transactional emails such as booking confirmations and enquiry responses.

• Google Analytics — website analytics (only with your consent).

• Microsoft Azure — secure hosting and storage of files such as ticket documents.

• Storyblok — management of our website content.

These providers only process your data on our instructions or as necessary to provide their service. We may also disclose data where required by law.

We keep your personal data only for as long as necessary for the purposes described above — for example, to fulfil your booking, meet legal and accounting obligations, and resolve any disputes. Enquiry messages are kept for as long as needed to deal with your request. When data is no longer required, it is securely deleted.

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.

• Ask us to correct inaccurate or incomplete data.

• Ask us to delete your data in certain circumstances.

• Object to or restrict how we process your data.

• Request a copy of your data in a portable format.

• Withdraw your consent at any time, for example for analytics cookies.

To exercise any of these rights, contact us at [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payments are encrypted and handled by Stripe, and access to your data is restricted to those who need it.

Our website and services are intended for adults. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at [email protected]